I too am using ESET Smart Security, though it is 5.2.9.1 version and get the same IPs giving ESET triggering DNS attack blocking. I have a Cisco E4200 router so I can use my tablet, which uses Android and Kaspersky and does not register attacks, but does not check tradiitonally for DNS poisoning either.
These attacks are sporadic and appeared to be access-determined, if I try to go to one site too often I get ESET triggering, same site infrequently accessed gets no poisoning report. I have gotten attacks across 3-4 subversions of ESET Smart Security. I have used computers since 1968, and will check with ESET tech support about the DNS Attack triggering.
BTW, Cisco E series uses a Linux derivative internally to router, if that triggers any memory I have no way to malware scan the router, but suspect strongly that if router was infected it would have much more of networking issues. Router has run two versions of firmware and ESET has triggered on DNS attack reporting diuring the both versions usage. I got the E4200 becasue it was on Comcast's recommended list for small business and thus more secureable than a home-grade router, NOT because I have a business (no business here).
Mom is Comcast account holder, I am the one with computer knowledge and handle internet setup and admin here.
